OBE32.exe; OBEMAIL.exe, OBEE.exe, OBEServ.exe

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I've been plagued by these three processes running on my PC. I can't kill the
processes, and they slow down my PC terrribly. Also, all processes are
"recognised" as Microsoft Corp. apps. All these files are 172 kb. and cant be
found when booting from booting from a disk. A Google search reveals no
solutions... only that other people have a problem with these. Does anyone
know what these files are, where do they come from, what do they do, are they
Microsfot products, and how do I get rid of them or stop them running? A
virus search does not identify these files as viruses, worms or trojans. Can
anyone help please!!

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Those .exe files are not listed in the MS Knowledge Base and therefore are
not MS related files. It appears these files are being started at boot and
if so, you will not be able to rename or delete them. Check Add/Remove
Programs in the Control Panel to see if there is some sort of a program
installed that might use these files. If so, uninstall it. If not, go to
Run on the Start button, type: msconfig and hit OK. Click the
startup tab, find and disable (remove the mark) the references to these
files. Restart the computer. Be sure that all files are being shown
(Windows Explorer, click view, click folder options, click the view tab and
mark Show All Files), do a find on the files and rename them. Reboot to see
if the files have been replaced by some other program being started at boot.
If they have not, then you should get a notice or notices stating that the
files cannot be found. All that remains will be to find the references to
the files in startup points and delete them. These are the typical start up
points:

Start up folder on the start menu, the load= and run= lines in the win.ini
and these registry run keys (use regedit.exe):

1. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\Run
2. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\­Run
3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\RunOnce
4. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\­RunOnce
5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\RunServices
6.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\RunServicesOnce
7.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\RunOnce\Setup

Note: There could be a minus sign at the end of the key: i.e.,
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\Run-


--
Regards


Ron Badour, MS MVP for W98
Tips: http://home.satx.rr.com/badour
Knowledge Base Info:
http://support.microsoft.com/default.aspx?pr=kbinfo



"Russell" <Russell @discussions.microsoft.com> wrote in message
news:BCF30EFD-D0F0-4351-A638-F073C8001D23@microsoft.com...
> I've been plagued by these three processes running on my PC. I can't kill
> the
> processes, and they slow down my PC terrribly. Also, all processes are
> "recognised" as Microsoft Corp. apps. All these files are 172 kb. and cant
> be
> found when booting from booting from a disk. A Google search reveals no
> solutions... only that other people have a problem with these. Does anyone
> know what these files are, where do they come from, what do they do, are
> they
> Microsfot products, and how do I get rid of them or stop them running? A
> virus search does not identify these files as viruses, worms or trojans.
> Can
> anyone help please!!

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Hey, I found out those files come with some versions of Windows Office
2003+ St. Ed. I found the original keys in the registry editor and all
you have to do is go to:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\_RunOnce

then delete the reg keys for OBEE, OBEE32, OBEEServ, and OBEEMail



--
DJ_Donger666
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message1808535.html